Commit Graph

6 Commits

Author SHA256 Message Date
Franck Bui
ddeadd32b5 - Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1365
2023-03-31 13:08:07 +00:00
Franck Bui
ff9f75126a - Call pam_loginuid when creating user@.service (bsc#1198507)
It's a backport of upstream commit 1000522a60ceade446773c67031b47a566d4a70d.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1280
2022-04-29 15:36:28 +00:00
Franck Bui
35cf21cc0b - Update systemd-user PAM service again
Change the default implementation of pam_setcred() again, previously
  customized to run the full "auth" PAM stack and only call pam_deny.so which is
  basically the SUSE default behavior without pam_warn.so.
  This is considered safer, especially on SLE where a regression was spotted by
  QA.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1217
2022-01-04 08:30:42 +00:00
Franck Bui
2d69dc0fbd update systemd-user to get the potential extended creds via common-auth
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1198
2021-10-08 08:31:22 +00:00
Franck Bui
a00cc781ce - Suppress PAM warning when the credentials for user@.service service
are established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other)
  is used, which consists of pam_warn.so + pam_deny.so, and will throw
  a warning each time a user logs in.

OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1197
2021-10-06 08:03:55 +00:00
Franck Bui
633f12103b Accepting request 501636 from home:fbui:systemd:Factory
- Make sure dracut (if installed) will embed the new compat rule (bsc#982303)
  The new compat rule must be embedded in the initramfs so make sure
  that the installed dracut supports it.

- Upgrade to v233 (commit 330b55d5e28d17f361062dba66426e46fb7d7857)
  - package new systemd-umount binary
  - package new environment generator stuff
  - drop /dev/root symlink support
  - /etc/pam.d/systemd-user is not patched anymore but we ship a
    dedicated file for SUSE now.
  - manage compat symlink generation in a dedicated branch (bsc#1040153)

- Fix systemd-sysv-convert when a package starts shipping service units (bsc#982303)
  The database might be missing when upgrading a package which was
  shipping no sysv init scripts nor unit files (at the time --save was
  called) but the new version start shipping unit files.

- Fix indentation in systemd-sysv-convert
  While at it, strip trailing whitespaces.
  No functional changes.

- Disable group shadow support (bsc#1029516)
  The new configure option will be imported during the next tarball
  update.

OBS-URL: https://build.opensuse.org/request/show/501636
OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=977
2017-06-07 10:48:51 +00:00